Terms of Use

01 Acceptance of Terms

By accessing, registering on, or using the anvera care platform ("Platform"), you agree to be bound by these Terms of Use ("Terms"). If you are registering on behalf of a clinic, hospital, or healthcare organisation, you represent that you have the authority to bind that entity to these Terms. If you do not agree, you must not use the Platform.

These Terms constitute a legally binding agreement between you ("User", "you") and Anvera Technologies Pvt. Ltd. ("Anvera", "we", "us"), a company registered in India.

02 Platform Description

anvera care is a Software-as-a-Service (SaaS) Practice Management System designed for healthcare providers in India. The Platform provides tools for appointment scheduling, electronic medical records (EMR), clinical documentation, billing, treatment planning, prescription management, secure messaging, and notifications.

03 Data Fiduciary & Data Processor Framework

Under the Digital Personal Data Protection Act, 2023 (DPDPA), the following roles and responsibilities apply:

3.1 — The Clinic as Data Fiduciary

The healthcare provider (clinic, hospital, or practitioner) that registers on the Platform is the Data Fiduciary as defined under Section 2(i) of the DPDPA 2023. The Data Fiduciary:

• Determines the purpose and means of processing patient personal data
• Is responsible for obtaining valid patient consent prior to collecting and processing their data on the Platform
• Bears the obligation to respond to Data Principal (patient) rights requests — including access, correction, and erasure
• Must ensure that doctors and staff provisioned on the Platform are authorised personnel acting within the scope of their duties
• Is responsible for compliance with applicable medical record retention rules as mandated by the National Medical Commission (NMC)

3.2 — Anvera as Data Processor

Anvera Technologies Pvt. Ltd. acts as the Data Processor as defined under Section 2(j) of the DPDPA 2023. As Data Processor, Anvera:

• Processes personal data solely on behalf of and under the instructions of the Data Fiduciary (the clinic)
• Implements appropriate technical and organisational security measures to protect personal data (see Section 6)
• Does NOT independently determine the purpose of data processing
• Does NOT sell, share, or monetise patient data for any purpose beyond providing the Platform services
• Will assist the Data Fiduciary in fulfilling their obligations under the DPDPA, including responding to Data Principal requests

3.3 — Multi-Clinic Data Isolation

The Platform enforces strict tenant-level data isolation. Each clinic operates as an independent data boundary. When a doctor is associated with multiple clinics:

• Patient records, appointments, and billing data from Clinic A are never visible to users accessing Clinic B
• Each clinic's Data Fiduciary retains independent control over their data
• Cross-clinic doctor linking does not grant cross-clinic data access

04 Account Types & Responsibilities

4.1 — Clinic Administrator

The Clinic Administrator (or Clinic Admin) registers the clinic and manages its configuration, staff, billing, and settings. The Clinic Admin:

• Is responsible for the accuracy of clinic information provided during registration
• Provisions doctor and staff accounts and is responsible for their actions within the Platform
• Manages subscription plans, notification settings, and service catalogs
• Can deactivate or remove staff on a per-clinic basis

4.2 — Doctors & Staff

Doctors are provisioned by the Clinic Admin and receive access credentials. Doctors:

• Must safeguard their login credentials and must not share them with unauthorised persons
• Are responsible for the accuracy of clinical documentation they create (SOAP notes, prescriptions, treatment plans)
• May be linked to multiple clinics, with data access strictly scoped to each clinic

4.3 — Patients

Patient records may be created by the Clinic Admin or Doctor without requiring the patient to have a Platform login. Patients whose records are stored on the Platform have rights as Data Principals under the DPDPA 2023 (see our Privacy Policy).

05 Subscriptions & Billing

5.1 — Plans & Pricing

The Platform offers tiered subscription plans (e.g., Starter, Professional, Enterprise) with defined limits for doctors, clinics, SMS credits, WhatsApp credits, and storage. Plan details and pricing are available within the Platform and may be updated from time to time with prior notice.

5.2 — Free Trial

New clinic registrations receive a time-limited free trial. During the trial, all Platform features are available within plan limits. No credit card is required for the trial.

5.3 — Subscription Limits

Subscription quotas (doctor count, clinic count, SMS/WhatsApp credits) are enforced at the account level across all clinics under the same billing entity. A doctor practising at multiple clinics within the same account is counted as a single unique seat.

5.4 — Expiry & Suspension

If a subscription expires and is not renewed, access to the Platform is restricted. The clinic's data is retained for a minimum of 90 days post-expiry, after which it may be permanently deleted. Anvera may suspend access to clinics that violate these Terms.

5.5 — Refunds

Subscription fees, once paid, are non-refundable except where required by applicable law. Unused SMS/WhatsApp credits do not carry over between billing periods unless specified in the plan terms.

06 Data Processing & Security

We implement the following security measures to protect data processed on the Platform:

• Encryption at rest: Personally Identifiable Information (PII) — including date of birth, contact information, and medical history — is encrypted using application-level Fernet symmetric encryption
• Encryption in transit: All data transmitted between the client and server is encrypted via HTTPS/TLS
• Authentication: JWT-based authentication with bcrypt password hashing. Role-based access control (RBAC) ensures users only access data relevant to their role and clinic
• Tenant isolation: Every database query is scoped by clinic_id to prevent cross-clinic data access
• Audit trail: Critical actions (staff provisioning, patient record changes, financial transactions) are logged with immutable audit entries
• Rate limiting: Authentication and sensitive endpoints are rate-limited to prevent brute-force attacks
• Soft deletion: Medical records are soft-deleted (flagged, not physically removed) to comply with NMC record-retention requirements

For full details on data collection, processing, and your rights, see our Privacy Policy.

07 AI Services Disclaimer

The Platform may include AI-powered features, including but not limited to:

• AI-generated SOAP (Subjective, Objective, Assessment, Plan) note suggestions
• AI-assisted clinical assessment summaries derived from specialty chart findings
• AI chatbot for general queries

08 Notification Services

The Platform enables clinics to send notifications to patients via SMS, WhatsApp, and email. The following applies:

• Notifications are sent on behalf of the clinic (the Data Fiduciary), not on behalf of Anvera
• The clinic is responsible for ensuring they have valid patient consent to send notifications via the chosen channel
• SMS notifications comply with TRAI DLT (Distributed Ledger Technology) regulations. The clinic's registered sender ID and templates are used
• Notification volumes are subject to plan-level quota limits (SMS and WhatsApp credits per billing period)
• Anvera is not liable for notification delivery failures caused by carrier issues, incorrect patient contact details, or DND (Do Not Disturb) registrations

09 Prohibited Uses

You agree not to:

• Use the Platform for any unlawful purpose or in violation of any applicable law or regulation
• Attempt to reverse-engineer, decompile, or disassemble any part of the Platform
• Use automated scripts, bots, or scrapers to access or extract data from the Platform
• Store patient data obtained from the Platform in external systems without appropriate authorisation and security measures
• Share login credentials with unauthorised persons or allow concurrent sessions that may compromise data security
• Upload malicious files, viruses, or content that could harm the Platform or its users
• Misrepresent your identity, role, or authority when accessing the Platform
• Use the Platform to send unsolicited marketing communications or spam via the notification system

10 Intellectual Property

The Platform — including its source code, user interface designs, algorithms, documentation, branding (anvera care name and logo), SOAP templates, specialty chart designs, and all associated intellectual property — is owned by Anvera Technologies Pvt. Ltd. and protected under applicable Indian copyright, trademark, and intellectual property laws.

Your subscription grants you a limited, non-exclusive, non-transferable, revocable licence to use the Platform for its intended purpose. This licence does not transfer ownership of any intellectual property.

Your data is yours. All clinical, patient, and financial data entered by you into the Platform remains your property. Anvera does not claim ownership of your data. Upon termination, you may export your data (see Section 13).

11 Fraud Warning

12 Limitation of Liability

To the maximum extent permitted by applicable law:

• The Platform is provided on an "as is" and "as available" basis without warranties of any kind, express or implied
• Anvera does not guarantee uninterrupted, error-free, or secure access to the Platform at all times
• Anvera shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Platform
• Anvera's total aggregate liability for any claim arising from these Terms shall not exceed the subscription fees paid by you in the twelve (12) months preceding the claim
• Anvera is not liable for clinical outcomes, medical decisions, or treatment results. The Platform is a tool — clinical responsibility rests entirely with the healthcare provider

13 Termination & Data Portability

13.1 — Termination by You

You may terminate your use of the Platform at any time by contacting us at hi@anveracare.com. Upon termination, your access will be revoked, but your data will be retained for 90 days to allow for data export.

13.2 — Termination by Anvera

Anvera reserves the right to suspend or terminate your access if:

• You breach these Terms or the Privacy Policy
• Your subscription expires and is not renewed within the grace period
• Your use of the Platform poses a security risk to other users
• Required by law or regulation

13.3 — Data Export

You have the right to export your data in a portable format. The Platform supports CSV export for patient data. For full database exports, contact us at hi@anveracare.com.

13.4 — Post-Termination Data Retention

After the 90-day retention period following termination, all data associated with your account may be permanently deleted. Anvera is not obligated to retain data beyond this period, except where required by law (e.g., audit trail records under NMC regulations).

14 Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with the laws of India. Any disputes arising out of or relating to these Terms shall be subject to the exclusive jurisdiction of the courts in Noida, Uttar Pradesh, India.

15 Changes to These Terms

Anvera reserves the right to modify these Terms at any time. Material changes will be communicated via email or an in-platform notice at least 30 days before they take effect. Your continued use of the Platform after the effective date of the revised Terms constitutes your acceptance of the changes.

The latest version of these Terms will always be available at anveracare.com/terms.

16 Contact

For questions, concerns, or legal inquiries regarding these Terms of Use, contact us at: